68553 matches found
Monstra CMS 3.0.4 - HTTP Header Injection
Monstra CMS 3.0.4 is susceptible to HTTP header injection in the plugins/captcha/crypt/cryptographp.php cfg parameter. An attacker can potentially supply invalid input and cause the server to allow redirects to attacker-controlled domains, perform cache poisoning, and/or allow improper access to...
Zeit Next.js < 4.2.3 - Local File Inclusion
Zeit Next.js before 4.2.3 is susceptible to local file inclusion under the /next request namespace. An attacker can obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2018-6184 info: name: Zeit Next.js =4.2...
Cybrotech CyBroHttpServer 1.0.3 - Local File Inclusion
Cybrotech CyBroHttpServer 1.0.3 is vulnerable to local file inclusion in the URI. id: CVE-2018-16133 info: name: Cybrotech CyBroHttpServer 1.0.3 - Local File Inclusion author: 0xAkoko severity: medium description: Cybrotech CyBroHttpServer 1.0.3 is vulnerable to local file inclusion in the URI...
DomainMOD 4.11.01 - Cross-Site Scripting
DomainMOD 4.11.01 is vulnerable to reflected cross-site Scripting via assets/edit/ip-address.php. id: CVE-2018-19137 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 is vulnerable to reflected cross-site Scripting via...
DomainMOD 4.11.01 - Cross-Site Scripting
DomainMOD 4.11.01 is vulnerable to reflected cross-site scripting via assets/edit/registrar-account.php. id: CVE-2018-19136 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 is vulnerable to reflected cross-site scripting v...
Jorani Leave Management System 0.6.5 - Cross-Site Scripting
Persistent cross-site scripting XSS issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the language parameter to session/language. id: CVE-2018-15917 info: name: Jorani Leave Management System 0.6.5 - Cross-Site Scripting author: ritikchaddha severity: medium...
Gogs (Go Git Service) 0.11.66 - Remote Code Execution
Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery in the file session provider in file.go. This is related to session ID handling in the go-macaron/session code for Macaron. id: CVE-2018-18925 info: name: Go...
Jolokia 1.3.7 - Cross-Site Scripting
Jolokia 1.3.7 is vulnerable to cross-site scripting in the HTTP servlet and allows an attacker to execute malicious JavaScript in the victim's browser. id: CVE-2018-1000129 info: name: Jolokia 1.3.7 - Cross-Site Scripting author: mavericknerd,0h1in9e,daffainfo severity: medium description: |...
cve-2018-17207
CVE-2018-17207 これはCvedの一部です： 脆弱なDockerコンテナを管理するためのツール。 Cved: https://github.com/git-rep-src/cved イメージソース：https://github.com/cved-sources/cve-2018-17207 イメージ作成者：https://github.com/cved-sources/cve-2018-17207...
CVE-2018-8039
This repository does not have a README...
Strutter
Strutter Prueba de concepto para CVE-2018-11776, viene completa con la capacidad de buscar en la API de Shodan objetivos CVE-2018-11776 Apache Struts versiones 2.3 a 2.3.34 y 2.5 a 2.5.16 sufren de posible Ejecución Remota de Código al usar resultados sin espacio de nombres y al mismo tiempo, sus...
cve-2018-7600
CVE-2018-7600 这是 Cved 的一部分： 一个用于管理易受攻击的 Docker 容器的工具。 Cved: https://github.com/git-rep-src/cved 镜像来源：https://github.com/cved-sources/cve-2018-7600 镜像作者：https://github.com/knqyf263/CVE-2018-7600...
Moodle-CVE-2018-1042
Moodle CVE-2018-1042 CVE-2018-1042を悪用して内部ポートスキャンを実行するスクリプト。...
CVE-2018-10936
This repository does not have a README...
RTF_11882_0802
RTF118820802 CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 研究: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about パッチ分析:...
CVE-2018-6574
CVE-2018-6574...
drupalgeddon2-cve-lab
Drupalgeddon2 CVE-2018-7600 实验环境 本仓库是 Drupalgeddon2 运行的可复用目标包。 Sentinel 于 2026-08-27 针对 Drupal core 7.57（使用 SQLite 和 PHP 7.4）复现了 CVE-2018-7600。该漏洞利用的是 Drupal 7 双请求 AJAX 渲染数组路径： 1. 通过 namepostrender=passthru、namemarkup=id 和 nametype=markup 污染用户密码表单缓存 2. 将返回的 formbuildid 提交至 /?q=file/ajax/name/valu...
mimipenguin
MimiPenguin 2.0 現在のLinuxデスクトップユーザーのログインパスワードをダンプするツール。人気のWindowsツールmimikatzの背後にあるアイデアを応用したものです。これは CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781 に割り当てられました。興味深い事実として、GNOME Keyring 3.27.2 以降も修正されておらず、3.28.0.2-1ubuntu1.18.04.1 でもまだ動作します。 詳細...
Detecting-the-patch-of-CVE-2018-1010
Detecting-the-patch-of-CVE-2018-1010 This C++ code developed on Visual Studio 2017. This program works with cmd's commands. In this program first, we check your operating system version and then according to Microsoft's notification checks whether you have installed the patch for CVE-2018-1010...